Skill UI

Automatically assists with generating Content Security Policies, offering step-by-step guidance, production-ready code, and validation against common standards whenever you mention or ask about CSP generation.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

A comprehensive guide for implementing and managing Role-Based Access Control (RBAC) within the Guidewire InsuranceSuite (PolicyCenter, ClaimCenter, BillingCenter). It details role hierarchies (Admin, Underwriter, Claims Adjuster), permission checking logic using APIs, and best practices for ensuring regulatory compliance (NAIC, DOI). Includes code examples for user provisioning and audit logging.

This guide provides a comprehensive reference for diagnosing and resolving common errors encountered when interacting with the Kling AI API. It covers various HTTP status codes (e.g., 400, 401, 429), task-level failures (e.g., content policy violations, low image quality), proper JWT token management, and implementing rate limit handling with exponential backoff. Use this resource when troubleshooting failed video generation or API integration issues.

Implements robust content policy compliance for generative AI prompts and outputs, such as those from Kling AI. This skill provides pre-submission filtering functionality, preventing the generation of restricted content (e.g., violence, explicit material, hate speech) and saving API credits. It includes Python code examples for prompt screening and handling server-side rejection messages.

An expert guide for designing, implementing, and optimizing large-scale, secure, and highly available cloud-native infrastructure using Kubernetes. Covers advanced topics including GitOps workflows (ArgoCD/Flux), service mesh architecture (Istio), multi-cluster management, Policy as Code (OPA), and infrastructure automation with Terraform. Ideal for platform engineers building enterprise-grade container orchestration solutions.

This skill provides advanced expertise in Infrastructure as Code (IaC) using Terraform and OpenTofu. It covers designing robust, reusable modules, managing complex multi-cloud state backends, and implementing enterprise-grade CI/CD pipelines. It specializes in governance, Policy-as-Code, and achieving GitOps compliance for full infrastructure automation.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

Automate security scanning for Infrastructure as Code (IaC) using best-in-class tools like Checkov and tfsec. This method analyzes Terraform, CloudFormation, and Kubernetes manifests to detect misconfigurations, enforce policy-based governance, and prevent common security vulnerabilities (e.g., public S3 buckets) before deployment. Essential for establishing secure CI/CD pipelines and meeting compliance standards.

This guide details the deployment and usage of OPA Gatekeeper, a powerful Kubernetes admission controller. Gatekeeper enforces custom policies written in Rego using ConstraintTemplates and Constraints. It validates, mutates, or denies resource requests at admission time, ensuring that non-compliant workloads are blocked before scheduling. Ideal for organizations requiring robust, code-based policy enforcement to meet strict security and compliance standards.